CVE-2010-2461

CVE-2010-2461 describes a SQL injection vulnerability in the storecat.php script of JCE-Tech Overstock 1 , exploitable by supplying a crafted value to the store parameter to execute arbitrary SQL. The NVD entry assigns a CVSS v2 base score 7.5 (HIGH) , with network access, no authentication, and ...

CVE-2010-2461

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

CVE-2010-2460

CVE-2010-2460 affects JCE-Tech Shareasale Script (SASS) 1, where the file merchant_product_list.php contains an SQL injection vulnerability exposed via the mechant_id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the dat...

CVE-2010-2461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

CVE-2010-2460: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in merchantproductlist.php in JCE-Tech Shareasale Script SASS 1 allows remote attackers to execute arbitrary SQL commands via the mechantid parameter...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22421 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms1.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

Scribe CMS Cross Site Scripting

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

CMS/Websites Designed By HYM SQL Injection

Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed or CMS provided by HYM is vulnerable to sqli. HYM is from 1998, they provide services in online tech and software.They provide CMS and Rankstinger...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...

HYM CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== HYM CMS SQL Injection Vulnerability =================================== Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed ...

TitanFtp Server 8.10.1125 Arbitrary File Download / Delete

Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

Cisco Security Advisory: Cisco Application Extension Platform Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Application Extension Platform Privilege Escalation Vulnerability Advisory ID: cisco-sa-20100609-axp Revision 1.0 For Public Release 2010 June 09 1600 UTC GMT...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22412 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

Cross-site Scripting (XSS) Vulnerability in Limny

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Limny which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Limny The vulnerability exists due to input sanitation error in the " q" parameter in...

CVE-2010-1572: Undefined Security Weakness

Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform AXP 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls...

SQL Injection Vulnerabilities in Mac's CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...

CVE-2010-1572

CVE-2010-1572 affects Cisco Application Extension Platform (AXP) versions 1.1 and 1.1.5 (upgraded from 1.1) on Cisco ISRs. A privilege escalation exists in the tech support diagnostic shell: an authenticated AXP user can use the API to execute commands and obtain complete administrative access, r...